Problème liens Google

Merci pour tout ! :)

Battlevince,

Pas de rapport Tools Cleaner ?!

1. Si un jour, tu veux passer en gratuit pour l'antivirus :

Avast!5 - Tuto : https://www.malekal.com/tutoriel-antivirus-avast/
ou
Antivir 9 personal edition free - Tuto : http://www.libellules.ch/tuto_antivir.php

2. Nettoyage de Windows avec Ccleaner qui est déjà sur ton PC.
Tuto : http://www.6ma.fr/tuto/ccleaner+v202-411
Ce logiciel doit être utilisé régulièrement pour nettoyer les fichiers temporaires et les cookies.

3.a) Désinstalle Java(TM) 6 Update 13

3.b) Télécharge et installe JRE 6 Update 21

****************************************************************

Je souhaite ne pas te revoir sur un forum de désinfection, mais j'imagine que tu vas souffler en lisant ce qui suit. N'empêche que 9 infections sur 10 sont installés directement par l'utilisateur. C'était le cas ici et parfois ça tourne plus mal.
On est aussi bien protégé en gratuit et on prend moins de risques ;)

* La multiplication des protections est une source de conflit et n'est pas plus efficace pour la sécurité : 1 seul anti-virus, 1 seul pare-feu (celui de Windows peut suffire), et en complément Malwarebytes : Antispyware gratuit : ça sert à rien!

* Maintiens tes logiciels à jours avec Secunia OSI (merci australien)
Ou en utilisant leur logiciel Secunia Personal Software Inspector
Ou celui-ci : Update Checker

* Ne pas surfer en droits administrateurs

* Ne pas installer n'importe quel logiciel sur son PC (surtout via des liens publicitaires), toujours se renseigner avant. Les télécharger dans la mesure du possible sur le site de l'éditeur. Éviter d'installer les diverses barres d'outils ou de recherches, etc....proposés lors de l'installation.

* Bannir les sites à risques (pornographiques, etc...) et les comportements à risques (P2P, cracks, warez....)

* Ne pas cliquer aveuglement sur des liens contenus dans les e-mails, les messageries instantanées, les réseaux sociaux, etc ...même si l'expéditeur est connu et à plus forte raison s'il est inconnu ou suspect.

* Utiliser un navigateur alternatif et le sécuriser (par exemple Firefox avec des modules complémentaires comme AdBlock, Noscript, WOT, etc...)

****************************************************************

Je t'invite à lire ces différents articles, afin de surfer plus sereinement :

Prévention : comment éviter bien des infections (par Falkra)

Pourquoi et comment je me fais infecter ? (par Malekal)

****************************************************************

N'oublie pas de me faire part d'éventuelles difficultés dans les dernières étapes.
Si tout se passe bien clique ensuite sur résolu, merci.

C'est fait ;)

:)

1. On va désinstaller les outils utilisés car ils ne peuvent pas rester sur ton système.

a) Relance OTL
* Clique sur le bouton Purge outils
* Clique ensuite sur OK dans la boite de dialogue qui t'invite à redémarrer le système

b) Télécharge Tools Cleaner (par A.Rothstein & dj QUIOU) sur le Bureau
* Lance l'outil
- Sous XP double-clic sur l'icône pour lancer l'outil.
* Clique sur Recherche et laisse le scan se terminer
* Clique ensuite sur Suppression
* Clique sur Quitter, pour que le rapport puisse se créer
* Poste le dans ton prochain message

Le rapport (TCleaner.txt) se trouve à la racine du disque dur (C:\)

2. Relance Tools Cleaner

* Clique sur le bouton Pt Restauration, puis successivement sur OK dans les boites de dialogue pour créer un nouveau point de restauration du système.
* Supprime Tools Cleaner ainsi que les autres outils restant éventuellement sur le bureau

3. Nous allons maintenant supprimer les anciens points de restauration pour finir le nettoyage.

Clique sur Poste de travail, puis fait un clic droit sur le disque dur principal (en général C:/)
* Clique sur Propriétés
Dans la fenêtre qui s'ouvre dans l'onglet général
* Clique sur Nettoyage de disque
Une boîte de dialogue te demande de patienter le temps du calcul, une nouvelle fenêtre va s'ouvrir.
* Choisit le 2ème onglet Autres options puis l'item Restauration du système
* Valide la boîte de dialogue qui s'affiche en cliquant sur Oui
* Ferme ensuite la fenêtre Nettoyage de disque en cliquant sur OK

A + pour la dernière étape

Salut! J'apprécie la facon avec laquelle tu traite mon problème et je suis très heureux de constaté qu'il te tiens a coeur ;)

Et oui j'ai accepter les mises a jour de ComboFix :)

Voici le rapport de OTL :

All processes killed
========== OTL ==========
Service cpuz130 stopped successfully!
Service cpuz130 deleted successfully!
File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys File not found not found.
Service cpuz128 stopped successfully!
Service cpuz128 deleted successfully!
File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\cpuz_x32.sys File not found not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2 deleted successfully.
========== FILES ==========
C:\Documents and Settings\All Users\Application Data\TEMP\{8C20787A-7402-4FA7-BF25-6E5750930FDC}\PostBuild.exe moved successfully.
C:\Documents and Settings\All Users\Application Data\TEMP\{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}\PostBuild.exe moved successfully.
C:\Documents and Settings\All Users\Application Data\TEMP\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}\PostBuild.exe moved successfully.
C:\Documents and Settings\Administrateur\Application Data\Uniblue\DriverScanner\Download\hid_vid_046d_pid_c50a9_80.exe moved successfully.
C:\Documents and Settings\Administrateur\Application Data\Uniblue\DriverScanner\Download\pci_ven_8086_dev_266f8_2_0_1011.exe moved successfully.
========== COMMANDS ==========

[EMPTYFLASH]

User: Administrateur
->Flash cache emptied: 1686 bytes

User: All Users

User: Default User

User: Invité
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb

[EMPTYTEMP]

User: Administrateur
->Temp folder emptied: 102923 bytes
->Temporary Internet Files folder emptied: 1411324 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 25573150 bytes
->Apple Safari cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Invité
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 2048000 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 16867 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 28,00 mb

OTL by OldTimer - Version 3.2.12.1 log created on 09152010_183900

Files\Folders moved on Reboot...
File\Folder C:\WINDOWS\temp\Perflib_Perfdata_38c.dat not found!

Registry entries deleted on Reboot...

Battlevince,

Content de te revoir :)

Tes infections étaient nombreuses dont une assez coriace.
Je t'avais demandé de ne pas installé de logiciels pendant le déroulement de la désinfection, surtout pour installer Spyware Doctor pas très efficace et dont le comportement est proche du rogue :(
infos : https://forum.malekal.com/viewtopic.php?t=12847&start=
A désinstaller d'urgence...Enfin celui là tu l'avais pas encore essayé, car de mémoire j'ai trouvé des traces de AVG, Avast, ESET, etc.......

Relance OTL
* L'interface principale s'ouvre :
* Dans la partie du bas "Personnalisation", copie/colle la liste en citation :

:OTL
DRV - (cpuz130) -- C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys File not found     
DRV - (cpuz128) -- C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\cpuz_x32.sys File not found     
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present 
@Alternate Data Stream - 257 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2

:Files
C:\Documents and Settings\All Users\Application Data\TEMP\{8C20787A-7402-4FA7-BF25-6E5750930FDC}\PostBuild.exe 
C:\Documents and Settings\All Users\Application Data\TEMP\{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}\PostBuild.exe 
C:\Documents and Settings\All Users\Application Data\TEMP\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}\PostBuild.exe 
C:\Documents and Settings\Administrateur\Application Data\Uniblue\DriverScanner\Download\hid_vid_046d_pid_c50a9_80.exe 
C:\Documents and Settings\Administrateur\Application Data\Uniblue\DriverScanner\Download\pci_ven_8086_dev_266f8_2_0_1011.exe 

:Commands 
[emptyflash]
[emptytemp]

* Clique sur le bouton Correction, patiente pendant le travail de l'outil, il va redémarrer le PC.
* Accepte en cliquant sur OK
* Le rapport indiquant les actions réalisées par OTL doit s'ouvrir spontanément
* Copie/colle le dans ton prochain message

Tu peux le retrouver le fichier à la racine du disque : C:\_OTL\MovedFiles (Vérifie la date si besoin : jjmmaaaa_xxxxxxxx.log)

Lors du scan de ComboFix, avais-tu autoriser ComboFix a se connecter à internet pour les mises à jour (si le programme la demandé ) ?

A +

Voici le rapport OTL :

http://www.cijoint.fr/cjlink.php?file=cj201009/cijYOB062B.txt

Battlevince,

Pas si vite, ce n'est pas un logiciel magique, il reste des actions complémentaires à mener. Va jusqu'au bout de la désinfection.

En attendant que j'interprète le rapport ComboFix, car j'ai besoin de prendre un autre avis pour certaines lignes.

Relance OTL
* L'interface principale s'ouvre :
* Dans la section Rapport en haut à droite de la fenêtre, coche Rapport minimal
* Laisse tous les autres paramètres par défaut
* Dans la partie du bas "Personnalisation", copie/colle la liste en citation :

netsvcs  
msconfig  
safebootminimal  
safebootnetwork  
activex  
drivers32  
/md5start 
winlogon.exe 
explorer.exe 
wuauclt.exe 
wininet.dll 
mshtml.dll 
iaStor.sys 
nvstor.sys 
atapi.sys 
IdeChnDr.sys 
viasraid.sys 
vaxscsi.sys 
nvatabus.sys 
SiSRaid.sys 
viamraid.sys 
nvata.sys 
nvgts.sys 
iastorv.sys 
nvstor32.sys 
ahcix86s.sys 
nvrd32.sys 
/md5stop 
%ALLUSERSPROFILE%\Application Data\*.exe /s  
%APPDATA%\*.exe /s  
%SYSTEMDRIVE%\*.exe  
%systemroot%\*. /mp /s  
%systemroot%\system32\*.dll /lockedfiles  
%systemroot%\Tasks\*.job /lockedfiles  
%systemroot%\system32\drivers\*.sys /lockedfiles   

* Clique sur le bouton Analyse rapide, patiente pendant le balayage du système.
* Après le balayage, le rapport OTL.txt va s'ouvrir au format bloc-note
* Héberge le sur http://www.cijoint.fr/ comme la 1er fois

A +
«La raison et la logique ne peuvent rien contre l'entêtement et la sottise.»

Merci beaucoup le probleme est réglé :) Vive comboFix!!!

Voici le rapport:

http://www.cijoint.fr/cjlink.php?file=cj201009/cijD22W7fR.txt

Bonsoir,

Le rapport Kaspersky montre des choses pas très rassurantes.
C'est une version cracké de l'antivirus que tu utilises ?
Des fichiers de Windows ont surement été patchés, que de risques inutiles ! :(

Sauvegarde tes documents les plus importants.

!! Ferme toutes tes applications en cours et désactive les protections résidentes de ton PC (Antivirus, Antispywares, etc...) !!

Télécharge ComboFix de sUBs sur ton bureau et nulle part ailleurs !

Regarde attentivement ce tutoriel pour t'aider : https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Si besoin, imprime ce dont tu auras besoin, car ensuite toutes les fenêtres doivent être fermés.

* Double-clique sur ComboFix.exe, accepte la licence d'utilisation puis laisse toi guider par le programme
* Accepte d'installer la console de récupèration
* !! Surtout ne rien faire et ne rien toucher pendant le travail de l'outil !! (risque de plantage complet l'ordinateur)
* A la fin ComboFix indique l'emplacement du rapport et l'ouvre spontanément (il est possible que ComboFix est besoin de redémarre l'ordinateur)
* Héberge les sur http://www.cijoint.fr/

A +

Oui malheureusement le problème est encore présent et voici l'historique des menaces supprimées par kapersky :

État : Supprimés (événements : 15)
2010-09-10 18:37:05 Supprimés cheval de Troie Trojan.Win32.KillTrial.b C:\Documents and Settings\Administrateur\Bureau\BOX_KTR_v2.5A.exe Elevées
2010-09-10 18:37:05 Supprimés programme malveillant HackTool.Win32.Kiser.be C:\Documents and Settings\Administrateur\Bureau\BOX_KTR_v2.5A.exe//PE_Patch.UPX Moyenne
2010-09-10 18:37:05 Supprimés programme malveillant HackTool.Win32.Kiser.be C:\Documents and Settings\Administrateur\Bureau\BOX_KTR_v2.5A.exe//PE_Patch.UPX//UPX Moyenne
2010-09-10 18:37:05 Supprimés programme malveillant HackTool.Win32.Kiser.be C:\Documents and Settings\Administrateur\Bureau\BOX_KTR_v2.5A.exe//PE_Patch.UPX//UPX//1BOX_Kaspersky 2010_Trial Reset 1.1.au3.tbl.decoded Moyenne
2010-09-10 18:37:05 Supprimés cheval de Troie Trojan.Win32.KillTrial.b C:\Documents and Settings\Administrateur\Bureau\BOX_KTR_v2.5A.exe//UPX Elevées
2010-09-10 18:37:05 Supprimés cheval de Troie Trojan.Win32.KillTrial.b C:\Documents and Settings\Administrateur\Bureau\BOX_KTR_v2.5A.exe//UPX//1BOX_Kaspersky 2010_Trial Reset 1.1.au3.tbl.decoded Elevées
2010-09-11 10:58:45 Supprimés cheval de Troie Packed.Win32.Krap.ao C:\Documents and Settings\Administrateur\Local Settings\Temp\mcxrnaowes.tmp Elevées
2010-09-11 10:58:47 Supprimés cheval de Troie Backdoor.Win32.VB.mea C:\Documents and Settings\Administrateur\Local Settings\Temp\cmxwnserao.tmp Elevées
2010-09-11 10:58:47 Supprimés cheval de Troie Backdoor.Win32.VB.mea C:\Documents and Settings\Administrateur\Local Settings\Temp\cmxwnserao.tmp//UPX Elevées
2010-09-11 10:58:49 Supprimés virus HEUR:Trojan.Win32.Generic C:\Documents and Settings\Administrateur\Local Settings\Temp\cweronamxs.tmp Elevées
2010-09-11 10:58:49 Supprimés virus HEUR:Trojan.Win32.Generic C:\Documents and Settings\Administrateur\Local Settings\Temp\cweronamxs.tmp//UPX Elevées
2010-09-11 10:59:04 Supprimés cheval de Troie Trojan.Win32.Scar.crkt C:\Documents and Settings\Administrateur\Local Settings\Temp\sowarmcxen.tmp Elevées
2010-09-12 13:09:49 Supprimés cheval de Troie Trojan.Win32.Agent.djeb C:\Program Files\iColorFolder\iColorFolder.exe Elevées
2010-09-13 17:43:22 Supprimés cheval de Troie Trojan.Win32.Agent.djeb C:\System Volume Information\_restore{27FDAF2D-3AD8-4CDC-8748-7560CCF44356}\RP1\A0002103.exe Elevées
2010-09-13 17:43:19 Supprimés cheval de Troie Trojan-Dropper.Win32.Delf.fvu C:\Program Files\CleanMyPC\Registry Cleaner\Crack\RCleaner.exe Elevées
État : En quarantaine (événements : 1)
2010-09-11 10:58:36 En quarantaine virus HEUR:Trojan.Win32.Generic C:\Documents and Settings\Administrateur\Local Settings\Temp\necmarsxow.tmp Elevées

P.S J'ai lancé un scan avec bitdefender online scanner et le rapport disais que explorer.exe était infecté par un trojan mais qu'il n'avais pas pu le réparer ou le supprimer.

Encore merci pour ton aide ! :)

Bonsoir,

Tu n'as pas pu trouvé le rapport de Kaspersky ?

Pas de rootkit en activité : GMER n'a rien trouvé.

Tu as toujours le même problème de redirection lorsque tu fais une recherche dans Google ?

A +

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit quick scan 2010-09-14 16:15:52
Windows 5.1.2600 Service Pack 3
Running: x96hun6b.exe; Driver: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\uxtdipob.sys

---- System - GMER 1.0.15 ----

SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwEnumerateKey [0xB4A66ECA]
SSDT \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) ZwEnumerateValueKey [0xB4A66F74]

Code \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) FsRtlCheckLockForReadAccess
Code \SystemRoot\system32\DRIVERS\klif.sys (Klif Mini-Filter [fre_wnet_x86]/Kaspersky Lab) IoIsOperationSynchronous

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 8A3271F8

AttachedDevice \Driver\Tcpip \Device\Ip kl1.sys (Kaspersky Unified Driver/Kaspersky Lab)
AttachedDevice \Driver\Tcpip \Device\Tcp kl1.sys (Kaspersky Unified Driver/Kaspersky Lab)
AttachedDevice \Driver\Tcpip \Device\Udp kl1.sys (Kaspersky Unified Driver/Kaspersky Lab)
AttachedDevice \Driver\Tcpip \Device\RawIp kl1.sys (Kaspersky Unified Driver/Kaspersky Lab)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)

---- EOF - GMER 1.0.15 ----

Bonjour,

1. Pour le rapport Kaskersky : https://forum.pcastuces.com/tutoriel____kaspersky_internet_security_2010-f25s48493.htm?page=1

2. Rends-toi sur le site de GMER

Attention lit attentivement les instructions, cet outil est à manier avec précautions

* Clique sur le bouton Download EXE pour télécharger l'outil avec un nom aléatoire afin que les malwares ne bloquent pas son exécution
* Enregistre ce fichier sur le bureau

! Désactive les logiciels de protection (anti-virus, anti-spyware, etc) et les défenses résidentes !

- Sous XP double-clic sur l'icône pour lancer l'outil.

* Si aucun rootkit n'est détecté

* Clique sur le bouton Copy puis OK et colle le rapport dans ton prochain message.

* Si un rootkit est détecté au démarrage du programme, une boite de dialogue s'ouvre :
WARNING, GMER has found rootkit activity, Do you want to fully scan your system ?
* Clique sur "YES"

Une fois le scan terminé clique sur le bouton Copy puis OK et colle le rapport dans ton prochain message.

A +

Le problème persiste et je n'ai pas trouvé de rapport pour le scan de kapersky mais je sais qu'il a trouvé deux virus (trojans je pense) et les a supprimés.

Voici le rapport de malwarebytes :

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 4610

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

2010-09-13 18:42:52
mbam-log-2010-09-13 (18-42-52).txt

Type d'examen: Examen complet (C:\|)
Elément(s) analysé(s): 224613
Temps écoulé: 36 minute(s), 45 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Bonjour,

Et maintenant ça va mieux ?

On va profiter de la présence de 2 logiciels sur ton système :

Fait un examen complet avec Malwarebytes ! Sans oublier de le mettre à jour avant !

Fait une analyse avec ton antivirus Kaspersky

Les rapports comme d'hab' ;)

A +

Et voici le rapport de OTL :

All processes killed
========== OTL ==========
Service .1214598459 stopped successfully!
Service .1214598459 deleted successfully!
File C:\Program Files\1214598459\XP PRO1214598459L.exe File not found not found.
Service XDva259 stopped successfully!
Service XDva259 deleted successfully!
File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Din3.tmp File not found not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5444357B-62D9-6AA5-41C0-5A187A1B0204}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5444357B-62D9-6AA5-41C0-5A187A1B0204}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F880A4A8-C436-4AC4-AFD1-AA0BDC9552DD}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F880A4A8-C436-4AC4-AFD1-AA0BDC9552DD}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Infodelivery\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}\ not found.
File C:\Program Files\PartyGaming\PartyPoker\RunApp.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}\ not found.
File C:\Program Files\PartyGaming\PartyPoker\RunApp.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{F4430FE8-2638-42e5-B849-800749B94EED}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4430FE8-2638-42e5-B849-800749B94EED}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{F4430FE8-2638-42e5-B849-800749B94EED}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4430FE8-2638-42e5-B849-800749B94EED}\ not found.
Starting removal of ActiveX control {E06E2E99-0AA1-11D4-ABA6-0060082AA75C}
C:\Program Files\WebEx\ieatgpc.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E06E2E99-0AA1-11D4-ABA6-0060082AA75C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E06E2E99-0AA1-11D4-ABA6-0060082AA75C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E06E2E99-0AA1-11D4-ABA6-0060082AA75C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E06E2E99-0AA1-11D4-ABA6-0060082AA75C}\ not found.
ADS C:\WINDOWS\System32\reset.exe:SummaryInformation deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:30FD0CBD deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:ECF54A0E deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:430C6D84 deleted successfully.
========== FILES ==========
C:\Documents and Settings\All Users\Application Data\{0CC51CB2-911C-40BB-BC1B-BD3CAC590222} folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs\vxgs54we.kj4 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs\v1sw1o0k.9hi folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs\Policies\uxgs54we.kj4 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs\Policies\u1sw1o0k.9hi folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs\Policies\i4auwzcy.rsh folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs\Policies folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs\Manifests folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs\j4auwzcy.rsh folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs\b2rg91xw.1p4 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs\92rg91xw.1p4 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs\7z1v718o.6n8 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs\73t3z6j5.7ag folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs\5z1v718o.6n8 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs\53t3z6j5.7ag folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\winsxs folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\system32\Ansi folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows\system32 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\Windows folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\OFFLINE folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\mIDEFunc.dll folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\FA57B377\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\FA57B377 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\F47E0415\E8DE91C8 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\F47E0415 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\F2C19C1F\1A9B0B16 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\F2C19C1F folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\F05C1C0F\E8DE91C8 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\F05C1C0F folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\EA2504B\1A9B0B16 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\EA2504B folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\E6866DFD\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\E6866DFD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\E2AC25AF\1A9B0B16 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\E2AC25AF folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\DEE1DFE0\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\DEE1DFE0 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\D5895295\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\D5895295 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\CD77AC88\3DFD6AB6 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\CD77AC88 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\CD104459\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\CD104459 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\C9C361F7\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\C9C361F7 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\C1D95179\1A9B0B16 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\C1D95179 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\BED01DD8\1A9B0B16 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\BED01DD8 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\B5B3987C\BC3FE200 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\B5B3987C folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\A909892F\BC3FE200 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\A909892F folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\90E3D279\E8DE91C8 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\90E3D279 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\908170D7\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\908170D7 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\8B955EE1\1A9B0B16 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\8B955EE1 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\88873419\1A9B0B16 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\88873419 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\83AD0D7\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\83AD0D7 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\73656A05\1A9B0B16 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\73656A05 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\7306E53D\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\7306E53D folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\6FDDF195\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\6FDDF195 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\65B78854\1A9B0B16 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\65B78854 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\5C40AA7E\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\5C40AA7E folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\4D290516\E8DE91C8 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\4D290516 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\4B257860\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\4B257860 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\3FBA627D\1A9B0B16 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\3FBA627D folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\3E39C89\2FB6E586 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\3E39C89 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\2C9F73B6\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\2C9F73B6 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\2C7BD434\E8DE91C8 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\2C7BD434 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\2AC187FE\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\2AC187FE folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\296E106F\E8DE91C8 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\296E106F folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\2439B37E\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\2439B37E folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\22B3D1EB\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\22B3D1EB folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\224783AD\E8DE91C8 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\224783AD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\1BB9B162\8F9F9DCD folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\1BB9B162 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\1B226F95\1A9B0B16 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner\1B226F95 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}\driverscanner folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E} folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\EC3AC4F3\B74607BA folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\EC3AC4F3 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\EBB1DC91\B74607BA folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\EBB1DC91 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\D720648F\B74607BA folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\D720648F folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\C77843B\B74607BA folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\C77843B folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\B430549D\B74607BA folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\B430549D folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\9966075F\B74607BA folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\9966075F folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\7AEFAE8C\B74607BA folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\7AEFAE8C folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\78B94F67\B74607BA folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\78B94F67 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\6A0591D6\B74607BA folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\6A0591D6 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\683B013A\B74607BA folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\683B013A folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\62A3297F\B74607BA folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\62A3297F folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\58D97068\B74607BA folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\58D97068 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\4BF757A\B74607BA folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\4BF757A folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\OFFLINE folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C} folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\AF01B0B\6383BC9B folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\AF01B0B folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\7CE1607E\6383BC9B folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\7CE1607E folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\7390E4F0\6383BC9B folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\7390E4F0 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\65B92A91\6383BC9B folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\65B92A91 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\52CD59C9\6383BC9B folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\52CD59C9 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\4E45A1A4\6383BC9B folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\4E45A1A4 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\371FE0D1\6383BC9B folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\371FE0D1 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\2B86F085\6383BC9B folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2\2B86F085 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\registrybooster2 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\OFFLINE folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} folder moved successfully.
C:\Documents and Settings\All Users\Application Data\{D7CFB71A-972A-44FF-AE44-8780EB53ABB2} folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\Spamconf folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\sounds\1036 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\sounds folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\report folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\moved folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\log folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\journal folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\integ folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\HtmlData folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\fw folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\chest folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\backup folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\arpot\TEMP folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\arpot folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Alwil Software folder moved successfully.
C:\Documents and Settings\All Users\Application Data\avg9\Log folder moved successfully.
C:\Documents and Settings\All Users\Application Data\avg9 folder moved successfully.
File\Folder C:\Program Files\PartyGaming not found.
========== COMMANDS ==========

[EMPTYFLASH]

User: Administrateur
->Flash cache emptied: 2790815 bytes

User: All Users

User: Default User

User: Invité
->Flash cache emptied: 2002 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 3,00 mb

[EMPTYTEMP]

User: Administrateur
->Temp folder emptied: 863620 bytes
->Temporary Internet Files folder emptied: 6215832 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 38097155 bytes
->Apple Safari cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Invité
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 59309462 bytes
->FireFox cache emptied: 23332536 bytes
->Opera cache emptied: 364141 bytes
->Flash cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 1120828 bytes
->Temporary Internet Files folder emptied: 540332 bytes

User: NetworkService
->Temp folder emptied: 2122064 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 66019 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 135925734 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 256,00 mb

OTL by OldTimer - Version 3.2.12.0 log created on 09122010_183804

Files\Folders moved on Reboot...
File\Folder C:\WINDOWS\temp\Perflib_Perfdata_3a0.dat not found!

Registry entries deleted on Reboot...

======= RAPPORT D'AD-REMOVER 2.0.0.1,E | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par C_XX le 06/09/10 à 15:20
Contact: AdRemover.contact[AT]gmail.com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 18:29:31 le 12/09/2010, Mode normal

Microsoft Windows XP Professionnel Service Pack 3 (X86)
Administrateur@XPPRO ( )

============== ACTION(S) ==============

0,Dossier supprimé: C:\Documents and Settings\Administrateur\Local Settings\Application Data\Conduit
0,Dossier supprimé: C:\Program Files\Conduit
0,Dossier supprimé: C:\Program Files\PartyGaming

(!) -- Fichiers temporaires supprimés.

-- Fichier ouvert: C:\Documents and Settings\Administrateur\Application Data\Mozilla\FireFox\Profiles\6idi5o24.default\Prefs.js --
Ligne supprimée: user_pref("CT2611275.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER...
Ligne supprimée: user_pref("CT2611275.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT261...
Ligne supprimée: user_pref("CT2611275.ct2611275.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_...
-- Fichier Fermé --

1,Clé supprimée: HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
0,Clé supprimée: HKCU\Software\PartyGaming
0,Clé supprimée: HKU\.DEFAULT\Software\Dealio
0,Clé supprimée: HKU\.DEFAULT\Software\Search Settings
0,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Extensions\{B7FE5D70-9AA2-40F1-9C6B-12A255F085E1}

0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{4B3803EA-5230-4DC3-A7FC-33638F3D3542}

============== SCAN ADDITIONNEL ==============

** Mozilla Firefox Version [3.6.8 (fr)] **

-- C:\Documents and Settings\Administrateur\Application Data\Mozilla\FireFox\Profiles\6idi5o24.default\Prefs.js --
browser.startup.homepage, hxxp://www.google.ca/
browser.startup.homepage_override.mstone, rv:1.9.2.9

-- C:\Documents and Settings\Invité\Application Data\Mozilla\FireFox\Profiles\xtuo2vc3.default\Prefs.js --
browser.download.lastDir, C:\\Documents and Settings\\Invité\\Mes documents\\Mes images
browser.startup.homepage, www.google.ca
browser.startup.homepage_override.mstone, rv:1.9.0.10

========================================

** Internet Explorer Version [8.0.6001.18702] **

[HKCU\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 872 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 14 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 12/09/2010 (3427 Octet(s))

Fin à: 18:32:00, 12/09/2010

============== E.O.F ==============

Effectivement, il reste encore du boulot ;))

1. Désinstalle ces logiciels, ils installent des adwares :

PartyGaming
PartyPoker

2. Télécharge AD-Remover (C_XX) sur le bureau

Désactive la protection résidente de ton anti-virus pour ne pas gêner le travail de l'outil

* Lance Ad-R
- Sous XP double-clic sur l'icône pour lancer l'outil.
* Clique sur "Oui" dans la boite de dialogue
* Dans l'interface principale, clique sur le bouton Nettoyer puis confirme l'action en cliquant sur "Oui"
* Patiente le temps du scan (le bureau peut disparaitre), le rapport doit s'ouvrir spontanément à la fin.
* Clique sur Quitter

Copie/colle le rapport dans ton prochain message.

Si le rapport ne s'ouvre pas spontanément, il se trouve à la racine du disque C:\Ad-report-CLEAN

"Process.exe" est détecté par certains antivirus comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus

3. Relance OTL
- Sous XP double-clic sur l'icône pour lancer l'outil.
* L'interface principale s'ouvre :
* Dans la partie du bas "Personnalisation", copie/colle la liste en citation :

:OTL
SRV - (.1214598459) -- C:\Program Files\1214598459\XP PRO1214598459L.exe File not found
DRV - (XDva259) -- C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Din3.tmp File not found
O2 - BHO: (no name) - {5444357B-62D9-6AA5-41C0-5A187A1B0204} - No CLSID value found. 
O2 - BHO: (no name) - {F880A4A8-C436-4AC4-AFD1-AA0BDC9552DD} - No CLSID value found.     
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.     
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.     
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.     
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No CLSID value found.     
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No CLSID value found.     
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present 
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe ()     
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe ()     
O9 - Extra Button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - Reg Error: Value error. File not found     
O9 - Extra 'Tools' menuitem : PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - Reg Error: Value error. File not found    
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C}  (Reg Error: Value error.)  
@Alternate Data Stream - 88 bytes -> C:\WINDOWS\System32\reset.exe:SummaryInformation     
@Alternate Data Stream - 272 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 175 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:30FD0CBD
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:ECF54A0E
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:430C6D84

:Files
C:\Documents and Settings\All Users\Application Data\{0CC51CB2-911C-40BB-BC1B-BD3CAC590222} 
C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E} 
C:\Documents and Settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C} 
C:\Documents and Settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185} 
C:\Documents and Settings\All Users\Application Data\{D7CFB71A-972A-44FF-AE44-8780EB53ABB2} 
C:\Documents and Settings\All Users\Application Data\Alwil Software 
C:\Documents and Settings\All Users\Application Data\avg9     
C:\Program Files\PartyGaming     

:Commands 
[emptyflash]
[emptytemp]

* Clique sur le bouton Correction, patiente pendant le travail de l'outil, il va redémarrer le PC.
* Accepte en cliquant sur OK
* Le rapport indiquant les actions réalisées par OTL doit s'ouvrir spontanément
* Copie/colle le dans ton prochain message

Tu peux le retrouver le fichier à la racine du disque : C:\_OTL\MovedFiles (Vérifie la date si besoin : jjmmaaaa_xxxxxxxx.log)

4. D'après tes rapports, tu habites au Canada, le décalage horaire peut rendre nos échanges moins rapprochés. Mais je réponds toujours !

A +

Le problème persiste :S Mais mon PC est un peu plus rapide ;)

Voici le rapport:

http://www.cijoint.fr/cjlink.php?file=cj201009/cijJZanSjh.txt

Merci encore de m'aider ! :)

A+